{"action":"Upgrade ezyang/htmlpurifier to 4.1.1 or later.","affected":[{"fixed":"4.1.1","introduced":"0"}],"component":"ezyang/htmlpurifier","cve_ids":["CVE-2010-2479"],"ecosystem":"Packagist","epss":0.02008,"exploited":false,"fixed_versions":["4.1.1"],"ghsa_id":"GHSA-6rm6-mjmh-86jq","id":"tcs_01M5KEXBK7MS5QFHA8MZ4T273E","modified_at":"2024-04-23T17:28:55.547906Z","published_at":"2022-05-17T05:49:44Z","references":["https://osv.dev/vulnerability/GHSA-6rm6-mjmh-86jq","https://nvd.nist.gov/vuln/detail/CVE-2010-2479","https://github.com/FriendsOfPHP/security-advisories/blob/master/ezyang/htmlpurifier/CVE-2010-2479.yaml","https://github.com/ezyang/htmlpurifier","http://htmlpurifier.org/news/2010/0531-4.1.1-released","http://repo.or.cz/w/htmlpurifier.git/commitdiff/18e538317a877a0509ae71a860429c41770da230","http://secunia.com/advisories/39613","http://secunia.com/advisories/40431","http://wiki.mahara.org/Release_Notes/1.0.15","http://wiki.mahara.org/Release_Notes/1.1.9","http://wiki.mahara.org/Release_Notes/1.2.5","http://www.securityfocus.com/bid/41259"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-6rm6-mjmh-86jq","url":"https://osv.dev/vulnerability/GHSA-6rm6-mjmh-86jq"}],"summary":"HTML Purifier Cross-site Scripting (XSS) vulnerability"}